How do I use IAM to allow user access to resources?

Resolution

Create IAM identities (users, groups, roles), and assign custom permissions sets (IAM policies) to the identities. IAM policies grant each user access to only the services, resources, and information that they need to perform tasks. You can also assign each user unique security credentials, access keys, and multi-factor authentication (MFA) devices.

Note: It's a best practice to apply least-privilege permissions for only the required permissions to perform a task.

You can also integrate IAM policies and permissions with directories that you already manage, such as an OpenID Connect provider. For more information, see Identity providers and federation.

You can interact with IAM through the web-based IAM console, the AWS Command Line Interface (AWS CLI), or the AWS API or SDKs. For more information, see Getting started with IAM.

For a list of AWS services that support IAM, see AWS services that work with IAM.

Related information

Identity federation in AWS

Security best practices in IAM